Red Hat Security AdvisoryRHSA-2024:1377
kpatch-patch security update
Released 2024-03-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) kpatch-patch-4_18_0-305_103_1-1-4.el8_4, kpatch-patch-4_18_0-305_108_1-1-3.el8_4, kpatch-patch-4_18_0-305_114_1-1-2.el8_4 +1
Fixes 3 records
Priority LOW 37
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00598 · Published 2023-04-28 · Partial fix CWE-787
Priority LOW 36
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00308 · Published 2024-01-17 · Partial fix · 6.7-rc5, 4.18.0-513.18.1.rt7.320.el8_9 +29 CWE-787
Priority LOW 36
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00293 · Published 2023-07-21 · Fixed in 6.5 CWE-787
THREATIST.IORead the docs